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Listing of Claims 

1. (Currently Amended) In an electronic device in communication with a 
network, a method for authenticating and authorizing a user, comprising the steps 
of: 

receiving a user request from a user electronic device; 

determining an identity of said user, wherein said step of determining further comprises 
the steps of: 

searching for information relating to said user in a repository of user 
information, said searching based at least partially on said user request and a login 
identity supplied by said user; 

retrieving a unique universal user identifier representing said user upon 
locating said information of said user; 

storing at least said unique universal user identifier in a data packet; 

sending said data packet to a storage device such that said data packet is 
transmittable to electronic devices in communication with said network when said user 
attempts to access a resource within said network; and 

retrieving an authorization datum associated with said user, based at least 
partially on said unique universal user identifier, from said resource. 



2. (Original) The method of claim 1, wherein said receiving step comprises said user 
providing a login name to said network. 
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3. (Currently Amended) The method of claim 1, wherein prior to said searching step, 
said method further comprising the steps of: 

registering said user with said network; 

generating said unique universal user identifier relating to said user; 
inserting said unique universal user identifier in said repository of user information; and 
populating a plurality of repositories containing authorization data with said unique 
universal user identifier. 

4. (Original) The method of claim 1, further comprising the step of said user providing 
a security identity. 

5. (Original) The method of claim 1, further comprising the step of said user providing a 
digital certificate. 

6. (Original) The method of claim 1, wherein said determining step further comprises 
indicating a result to said user regarding permitted access to said network. 

7. (Original) The method of claim 1, wherein said determining step further comprises 
requesting a user credential of said user. 

8. (Original) The method of claim 1, wherein said sending step further comprises 
sending said data packet to a user electronic device supporting said storage device. 
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9. (Currently Amended) The method of claim 1, further comprising the step of storing 
information in addition to said unique universal user identifier in said data packet. 

10. (Original) The method of claim 1, wherein said sending step comprises transmitting 
a cookie to said user electronic device enabling an identity of said user to be automatically 
recognized when said cookie is transmitted to said resource within said network. 

1 1 . (Original) The method of claim 1 , further comprising the step of encrypting said 
data packet. 

12. (Currently Amended) In an electronic device in communication with a network, a 
method for a user to access a plurality of resources having different authorization requirements, 
the method comprising: 

said network storing a plurality of unique universal user identifiers with said 
plurality of resources; 

said user accessing said network via a user electronic device; 
said user providing identifying data to said network; 

said network retrieving a unique universal user identifier for said user in a repository 
of unique universal user identifiers; 

said network storing said unique universal user identifier on a storage device, said 
unique universal user identifier indicating said user is authenticated; 
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said user accessing one of said plurality of resources, wherein said unique universal 
user identifier is transmitted to said one of said plurality of resources to identify said user such 
that said user can access authorized resources without providing additional identifying 
information and said user is denied access to unauthorized resources. 

13. (Currently Amended) The method of claim 12, further comprising said unique 
universal user identifier providing a key to retrieve an authorization datum associated with one 
of said plurality of unique universal user identifiers matching said unique universal user 
identifier from one of said plurality of resources. 

14. (Currently Amended) The method of claim 12, wherein prior to said step of storing 
said plurality of unique universal user identifiers, said method further comprising the steps of: 

said user registering with said network; 

said network generating said unique universal user identifier for said user; and 
said network inserting said unique universal user identifier in at least one of said 
plurality of unique universal user identifiers. 

15. (Original) The method of claim 12, wherein said proving step comprises said user 
supplying at least one of a login name, a password, and a digital certificate. 

16. (Currently Amended) The method of claim 12, wherein prior to said storing said 
unique universal user identifier step, said method further comprising said user providing 
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credentials. 

17. (Currently Amended) The method of claim 16, wherein prior to said storing said 
unique universal user identifier step, said method further comprising said user providing a 
digital certificate. 

18. (Currently Amended) A method implemented by at least one electronic device for 
authentication and authorization using a unique universal user identifier to retrieve user data, 
the method comprising the steps of: 

accessing a repository containing a plurality of unique universal user identifiers; 
retrieving said unique universal user identifier from said repository, said unique 
universal user identifier being unique to a user; 

storing said unique universal user identifier in a data packet readable by an electronic 

device; 

transmitting said data packet to a storage device coupled to said electronic device; and 
making said data packet available to a resource configured within an enterprise network 
to authorize said user. 



19. (Currently Amended) The method of claim 18, wherein said step of storing 
comprises packaging said unique universal user identifier in a cookie suitable for storage on at 
least one of a user electronic device and a user proxy electronic device. 
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20. (Original) The method of claim 19, further comprising the step of a software 
program employed to access a network reading said storage device. 

21. (Original) The method of claim 19, further comprising the step of a web browser 
employed to access a network reading said storage device. 

22. (Currently Amended) The method of claim 18, further comprising the steps of: 
delivering said data packet to said resource configured within said enterprise network; 
extracting said unique universal user identifier from said data packet; 

accessing a repository containing a plurality of user entitlement data; and 

retrieving a user-specific entitlement from said repository containing said plurality of 

user entitlement data using said unique universal user identifier to locate said user-specific 

entitlement. 

23 . (Currently Amended) A network of electronic devices suitable for implementing a 
method for authentication and authorization using a unique universal user identifier to retrieve 
user data, said network of electronic devices comprising: 

a repository containing a plurality of unique universal user identifiers, each unique 
universal user identifier being unique to a user and said repository being in communication 
with said network; 

a first software tool suitable for receiving user login information, accessing said 
repository, locating a unique universal user identifier relating to said user, and transmitting any 
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such unique universal user identifier to an electronic storage device suitable for storing said 
unique universal user identifier in a data packet for transmission to resources within said 
network; 

a user electronic device suitable for communication with said network; and 
a second software tool suitable for receiving said data packet and locating authorization 
datum of said user. 

24. (Original) The network of electronic devices according to claim 23, wherein said 
electronic storage device is readable by a software program suitable for accessing said network. 

25. (Original) The network of electronic devices according to claim 24, wherein said 
software program is a web browser. 

26. (Original) The network of electronic devices according to claim 23, wherein said 
electronic storage device is a resource configured within said network. 

27. (Currently Amended) The network of electronic devices according to claim 23, 
further comprising a repository containing authorization data, said repository accessible using 
said unique universal user identifier as a key to retrieve a user-specific entitlement associated 
with said user. 



28. (Currently Amended) A computer readable medium containing a software program 
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for executing a method for authenticating and authorizing a user, said method comprising the 
steps of: 

receiving a user request from a user electronic device; 

determining an identity of said user, wherein said step of determining further comprises 
the steps of: 

searching for information of said user in an authentication database; 
locating said user credential in reference to said user in said authentication 
database; 

retrieving a unique universal user identifier representing said user upon locating 
said user credential in reference to said user; 

packaging at least said unique universal user identifier in a data packet; and 
transmitting said data packet to a user electronic device such that said data 
packet is transmittable to electronic devices in communication with a network when said 
user attempts to access a resource within said network such that said user can access 
authorized resources without providing additional identifying information. 

29. (Currently Amended) The computer readable medium of claim 28, wherein the 
method executed by the software program further comprises the steps of: 

transmitting said data packet to said resource within said network; 

accessing a repository containing a plurality of unique universal user identifiers 
using said packaged unique universal user identifier in a search operation; and 

retrieving a user-specific entitlement from said repository containing a plurality of 
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unique universal user identifiers, said user-specific entitlement associated with said packaged 
unique universal identifier. 



30. (Original) The computer readable medium of claim 28, wherein the method 
executed by the software program further comprises the step of requesting a user credential. 



